{"uuid": "399db233-b3fb-4350-acfb-69f452363e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "https://t.me/cissp/2079", "content": "1. Adventures in Reversing Malicious Run-Only AppleScripts\nhttps://labs.sentinelone.com/fade-dead-adventures-in-reversing-malicious-run-only-applescripts\n\n2. SUNSPOT Malware: An Implant in the Build Process\nhttps://www.crowdstrike.com/blog/sunspot-malware-technical-analysis\n\n1. Pentesting the ELK (Elasticsearch, Logstash, Kibana) Stack\nhttps://insinuator.net/2021/01/\npentesting-the-elk-stack\n\n2. Hiding execution of unsigned code in system threads\nhttps://secret.club/2021/01/12/callout.html\n]-> callout-poc:\nhttps://github.com/thesecretclub/callout-poc\n\nStrengthening Security Configurations to Defend Against Attackers Targeting Cloud Services\nhttps://us-cert.cisa.gov/ncas/analysis-reports/ar21-013a\n\n1. Breaking Google Chrome browser running on Windows (PoC)\nhttps://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors\n\n2. Flutter based Mac OSX Thick Client SSL Pinning Bypass\nhttps://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass\n\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012\n\nCreate module for CVE-2020-17136:\nCloud Filter Arbitrary File Creation EoP (PoC)\n// LPE on Windows 10 1803 and later\nhttps://github.com/rapid7/metasploit-framework/pull/14585", "creation_timestamp": "2026-09-01T17:01:06.555455Z"}